Automate Service IP whitelisting

[ShadowCircuit87]

I'm aware that the Power BI Service IPs are available here: Download Azure IP Ranges and Service Tags – Public Cloud from Official Microsoft Download Center, and that it changes every week. 

My data source requires these IPs to be whitelisted: can this be automated?

Manual process: download service tags, update whitelist in data source system (every week). I'm more interested in automating the weekly download part. 

[Anonymous]

Hi @ShadowCircuit87,

Thank you for reaching out to the Microsoft Fabric Forum Community, and special thanks to @rohit1991  for prompt and helpful response.

Just following up to see if the Response provided by community member were helpful in addressing the issue.

If one of the response helped resolve your query, please consider marking it as the Accepted Solution. Feel free to reach out if you need any further clarification or assistance.

Best regards,
Prasanna Kumar

[rohit1991 · Accepted solution]

Hi @ShadowCircuit87 

Yes, this can be automated. The simplest option is to use Azure Service Tags such as PowerBI in your firewall rules, which are automatically updated by Microsoft so you don’t need to maintain them manually. If your environment does not support service tags, you can still handle it with automation. A common method is to create a PowerShell or Azure CLI script that downloads the official Azure IP ranges JSON file, extracts only the Power BI IP addresses, and updates your whitelist. This script can then be scheduled to run every week using Task Scheduler, Azure Automation, or Logic Apps. By doing this, your firewall rules or network settings will always stay up to date without any manual intervention. In short, either rely on service tags for a hands-off solution or set up a scheduled script to refresh the IPs automatically.